From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Tue, 20 Oct 2026 13:49:57 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xJ8Lt-001124-1d for lore@lore.pengutronix.de; Tue, 20 Oct 2026 13:49:57 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xJ8Ls-0002o8-GI; Tue, 20 Oct 2026 13:49:56 +0200 Received: from mx1.white.stw.pengutronix.de ([185.203.200.13]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xJ8LE-0000TO-Id for ptxdist@pengutronix.de; Tue, 20 Oct 2026 13:49:17 +0200 Received: from h4.cmg2.smtp.forpsi.com (h4.cmg2.smtp.forpsi.com [185.129.138.189]) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPS id 7039F201EA4 for ; Tue, 20 Oct 2026 13:49:16 +0200 (CEST) ARC-Seal: i=1; s=20260414; d=pengutronix.de; t=1792496956; a=rsa-sha256; cv=none; b=Gw8fb+YK9vkloYq2Q0Grl0S+lOoAnpPc9iI+A+RBJliaqAadxutjYNSRGGah0aLwZB66jN Bl8CUcp2P+wmwTFah13TP0TYy/l1wUA3W1Gl7vMSLYVODEGkTr0kOJawr2L/V/IM7lhzCR ko18AcnFUl7aNE6g4dF/CgkmBbzoghlMOHADd9n7R6HJ+y3ZhxXCStAFlSORjI9rdPM7Ug YnptHxRoiS4ztC/CtRv9xNB9DDiWIBuGptHZnn0n9QueLMg60mevP9Nt5xTXd2x5qmQb08 8z9CC3XlKJEQP8unKBK8hT3iMVbeyqmETn8WmmYmIoKCM4DiUQEQv7QHC13DAA== ARC-Authentication-Results: i=1; mx1.white.stw.pengutronix.de; dkim=pass header.d=triops.cz header.s=f2019 header.b=0hv4VLGk; spf=none (mx1.white.stw.pengutronix.de: domain of oss-lists@triops.cz has no SPF policy when checking 185.129.138.189) smtp.mailfrom=oss-lists@triops.cz; dmarc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1792496956; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=HkJOhrVi1wJqDXGLJoJm+iNgjs+vp8KbeQu46eE+d+8=; b=LS8LOIt0d5mm1m2lMgOC+kgXEM0hKrNqI+/zEpBu7Nl3ApDBCzqy9CxT1XdXRUrOaqPVJS gd0notyFXNeSXLz8bGSdiTzeCY4UZR/X4tujJkP2bf33oFxRupTJL2ObqRAhmwi8K4+TTr agpSvPXhYvCQK+BQXd4VNeGGwDe3EEqKbd6UVgxGss03oi0IXRAOEAIbxl+/ok7mpuTNBY 2ge8mP7JOvSPNJOBPRmExTYd/ZzngRGXuYmzoQTA6Ue5LopeckGZvRjpXZFfEH5V1bzm5N LYk+yfOtnxBTDkeb2/UdTEcX1CkPgJg7BwMo9s0EIPJMdicla0d4px23d8YYpg== Received: from localhost.localdomain ([91.218.190.200]) by cmgsmtp with ESMTPSA id J8LAx5Bd8NbEUJ8LExFQAh; Tue, 20 Oct 2026 13:49:16 +0200 From: Ladislav Michl To: ptxdist@pengutronix.de Date: Tue, 20 Oct 2026 13:49:09 +0200 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-CMAE-Envelope: MS4xfK9SehLm9SNcbdr2k/Xf4nQmPBhBnu5jc1oLSOxA8A9lDAiOFFpR8rfIzFAKcbUMDE7a5htvQjE9IGlFje8NoF/RaXwBHmQD9iZ/B8h+VVV1BmV9wCMD 6GYdvbjCjPado6WmnyXcKeblgb8A2xRrSPM3cGxd7R0lLHlZV5FwbfGO5ohYXX3VbhXkbrIHeGAwsq2/pC5nTwOf6GtWUykSXw8= X-Rspamd-Server: mx1 X-Rspamd-Queue-Id: 7039F201EA4 X-Spamd-Result: default: False [-2.60 / 15.00]; BAYES_HAM(-3.00)[100.00%]; R_MISSING_CHARSET(0.50)[]; ONCE_RECEIVED(0.20)[]; R_DKIM_ALLOW(-0.20)[triops.cz:s=f2019]; MIME_GOOD(-0.10)[text/plain]; RCVD_VIA_SMTP_AUTH(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; ASN(0.00)[asn:24806, ipnet:185.129.136.0/22, country:CZ]; MIME_TRACE(0.00)[0:+]; RCVD_COUNT_ONE(0.00)[1]; ARC_NA(0.00)[]; RCVD_TLS_ALL(0.00)[]; DMARC_NA(0.00)[triops.cz]; ARC_SIGNED(0.00)[pengutronix.de:s=20260414:i=1]; FROM_EQ_ENVFROM(0.00)[]; FROM_HAS_DN(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; R_SPF_NA(0.00)[no SPF record]; TO_MATCH_ENVRCPT_ALL(0.00)[]; TO_DN_NONE(0.00)[]; NEURAL_HAM(-0.00)[-0.990]; DKIM_TRACE(0.00)[triops.cz:+] X-Rspamd-Action: no action X-Stat-Signature: gtc77jamfirf8pr1qase4453yajjycfn X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.3 required=5.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,SPF_HELO_PASS autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH v1 16/17] sepolgen: version bump 1.1.8 -> 3.11 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false From: Ladislav Michl Since SELinux userspace 2.8, the sepolgen python module is shipped in the selinux-python tarball together with audit2allow, so rename the package to selinux-python. Signed-off-by: Ladislav Michl --- rules/selinux-python.in | 12 +++++++ rules/selinux-python.make | 68 +++++++++++++++++++++++++++++++++++++++ rules/sepolgen.in | 29 ----------------- rules/sepolgen.make | 54 ------------------------------- 4 files changed, 80 insertions(+), 83 deletions(-) create mode 100644 rules/selinux-python.in create mode 100644 rules/selinux-python.make delete mode 100644 rules/sepolgen.in delete mode 100644 rules/sepolgen.make diff --git a/rules/selinux-python.in b/rules/selinux-python.in new file mode 100644 index 000000000..d2f6eb655 --- /dev/null +++ b/rules/selinux-python.in @@ -0,0 +1,12 @@ +## SECTION=selinux + +config SELINUX_PYTHON + tristate + prompt "selinux-python" + select PYTHON3 + select LIBSEPOL + select LIBSELINUX + select LIBSELINUX_PYTHON + help + audit2allow and the sepolgen python module it uses to + generate SELinux policy from audit messages. diff --git a/rules/selinux-python.make b/rules/selinux-python.make new file mode 100644 index 000000000..fc53859fb --- /dev/null +++ b/rules/selinux-python.make @@ -0,0 +1,68 @@ +# -*-makefile-*- +# +# Copyright (C) 2013 by Marc Kleine-Budde +# +# For further information about the PTXdist project and license conditions +# see the README file. +# + +# +# We provide this package +# +PACKAGES-$(PTXCONF_SELINUX_PYTHON) += selinux-python + +# +# Paths and names +# +SELINUX_PYTHON_VERSION := $(SELINUX_VERSION) +SELINUX_PYTHON_SHA256 := f854d7fe67981d80c612067e97c1804f641a9dfcca2d38baeb3efe52b7875398 +SELINUX_PYTHON := selinux-python-$(SELINUX_PYTHON_VERSION) +SELINUX_PYTHON_SUFFIX := tar.gz +SELINUX_PYTHON_URL := $(SELINUX_URL)/$(SELINUX_PYTHON).$(SELINUX_PYTHON_SUFFIX) +SELINUX_PYTHON_SOURCE := $(SRCDIR)/$(SELINUX_PYTHON).$(SELINUX_PYTHON_SUFFIX) +SELINUX_PYTHON_DIR := $(BUILDDIR)/$(SELINUX_PYTHON) +SELINUX_PYTHON_LICENSE := GPL-2.0-only +SELINUX_PYTHON_LICENSE_FILES := file://LICENSE;md5=393a5ca445f6965873eca0259a17f833 + +# ---------------------------------------------------------------------------- +# Prepare +# ---------------------------------------------------------------------------- + +SELINUX_PYTHON_CONF_TOOL := NO +# no ':=' because of $(CROSS_PYTHON3) +SELINUX_PYTHON_MAKE_ENV = \ + $(CROSS_ENV) \ + CFLAGS="-O2 -Wall" \ + PYTHON=$(CROSS_PYTHON3) \ + PYTHONLIBDIR=$(PYTHON3_SITEPACKAGES) +SELINUX_PYTHON_MAKE_OPT := \ + SUBDIRS="sepolgen audit2allow" +SELINUX_PYTHON_INSTALL_OPT := \ + $(SELINUX_PYTHON_MAKE_OPT) \ + install + +# ---------------------------------------------------------------------------- +# Target-Install +# ---------------------------------------------------------------------------- + +$(STATEDIR)/selinux-python.targetinstall: + @$(call targetinfo) + + @$(call install_init, selinux-python) + @$(call install_fixup, selinux-python,PRIORITY,optional) + @$(call install_fixup, selinux-python,SECTION,base) + @$(call install_fixup, selinux-python,AUTHOR,"Marc Kleine-Budde ") + @$(call install_fixup, selinux-python,DESCRIPTION,missing) + + @$(call install_tree, selinux-python, 0, 0, -, $(PYTHON3_SITEPACKAGES)) + @$(call install_alternative, selinux-python, 0, 0, 0644, /var/lib/sepolgen/perm_map) + @$(call install_copy, selinux-python, 0, 0, 0755, -, /usr/bin/audit2allow) + @$(call install_link, selinux-python, audit2allow, /usr/bin/audit2why) + @$(call install_copy, selinux-python, 0, 0, 0755, -, /usr/bin/sepolgen-ifgen) + @$(call install_copy, selinux-python, 0, 0, 0755, -, /usr/bin/sepolgen-ifgen-attr-helper) + + @$(call install_finish, selinux-python) + + @$(call touch) + +# vim: syntax=make diff --git a/rules/sepolgen.in b/rules/sepolgen.in deleted file mode 100644 index 94f2ce071..000000000 --- a/rules/sepolgen.in +++ /dev/null @@ -1,29 +0,0 @@ -## SECTION=staging -## old section: -### SECTION=selinux - -config SEPOLGEN - tristate - prompt "sepolgen" - select PYTHON - select LIBSELINUX - select LIBSELINUX_PYTHON - help - A Python module used in SELinux policy generation - - This package contains a Python module that forms the core of - the modern audit2allow (which is a part of the package - policycoreutils). The sepolgen library is structured to give - flexibility to the application using it. The library - contains: Reference Policy Representation, which are Objects - for representing policies and the reference policy - interfaces. Secondly, it has objects and algorithms for - representing access and sets of access in an abstract way - and searching that access. It also has a parser for - reference policy "headers". It contains infrastructure for - parsing SELinux related messages as produced by the audit - system. It has facilities for generating policy based on - required access. - - STAGING: remove in ptxdist-2020.06.0 - Old version that needs to be updated. diff --git a/rules/sepolgen.make b/rules/sepolgen.make deleted file mode 100644 index 7084e1d1d..000000000 --- a/rules/sepolgen.make +++ /dev/null @@ -1,54 +0,0 @@ -# -*-makefile-*- -# -# Copyright (C) 2013 by Marc Kleine-Budde -# -# For further information about the PTXdist project and license conditions -# see the README file. -# - -# -# We provide this package -# -PACKAGES-$(PTXCONF_SEPOLGEN) += sepolgen - -# -# Paths and names -# -SEPOLGEN_VERSION := 1.1.8 -SEPOLGEN_MD5 := d734ff236639cc1bd3a33901774fa98d -SEPOLGEN := sepolgen-$(SEPOLGEN_VERSION) -SEPOLGEN_SUFFIX := tar.gz -SEPOLGEN_URL := https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20120924/$(SEPOLGEN).$(SEPOLGEN_SUFFIX) -SEPOLGEN_SOURCE := $(SRCDIR)/$(SEPOLGEN).$(SEPOLGEN_SUFFIX) -SEPOLGEN_DIR := $(BUILDDIR)/$(SEPOLGEN) -SEPOLGEN_LICENSE := GPL-2.0-only - -# ---------------------------------------------------------------------------- -# Prepare -# ---------------------------------------------------------------------------- - -SEPOLGEN_CONF_TOOL := NO -# no ':=' because of $(PYTHON_SITEPACKAGES) -SEPOLGEN_MAKE_ENV = PYTHONLIBDIR=$(PYTHON_SITEPACKAGES) - -# ---------------------------------------------------------------------------- -# Target-Install -# ---------------------------------------------------------------------------- - -$(STATEDIR)/sepolgen.targetinstall: - @$(call targetinfo) - - @$(call install_init, sepolgen) - @$(call install_fixup, sepolgen,PRIORITY,optional) - @$(call install_fixup, sepolgen,SECTION,base) - @$(call install_fixup, sepolgen,AUTHOR,"Marc Kleine-Budde ") - @$(call install_fixup, sepolgen,DESCRIPTION,missing) - - @$(call install_tree, sepolgen, 0, 0, -, $(PYTHON_SITEPACKAGES)) - @$(call install_alternative, sepolgen, 0, 0, 0644, /var/lib/sepolgen/perm_map) - - @$(call install_finish, sepolgen) - - @$(call touch) - -# vim: syntax=make -- 2.47.3